Raccoon0365 is a rapidly growing online registration service, allowing users to carry out large-scale fraud campaigns.
Microsoft's demolition of 340 websites of the Raccoon0365 service was carried out after the group received an order from the District Court of Manhattan (USA) in early September.
According to Steven Masada, assistant general counsel of Microsoft's Digital Crime Unit, Raccoon0365 operates primarily through a private Telegram channel with more than 850 members.
This service allows cybercriminals to impersonate reputable brands, tricking victims into entering logins on fake pages that are identical to Microsoft's login portal.
Since its launch in July 2024, the operating group has earned at least $100,000 in cryptocurrency.
Microsoft identified Joshua Ogundipe in Nigeria as the leader of Raccoon0365. The group stole at least 5,000 Microsoft accounts and targeted across industries, especially many organizations in New York City.
In February 2025 alone, Raccoon0365 distributed fake tax-themed emails, attacking more than 2,300 organizations, mainly in the US.
Errol Weiss, security director of the Center for Health Analysis and Sharing of Medical Information (Health-ISAC), a co- plaintiff with Microsoft, said that at least five health organizations have become victims of the group.
As long as an account is exposed, bad guys can penetrate deep into the system, and the way they exploit it is limited to imagination, Errol Weiss emphasized.
The report also shows that Raccoon0365 once took advantage of Cloudflare's services to conceal technical infrastructure.
Cloudflare has since partnered with Microsoft and the US Secret Service to block the activity, while blocking efforts to create new accounts.
Blake Darche, Director of Threat Intelligence at Cloudflare, said the operating group committed many basic security errors but still caused serious consequences.
Steven Masada affirmed: cybercrime does not need to be sophisticated to cause great harm. Tools like Raccoon0365 make anyone a scammer, threatening millions of users worldwide.
